CyberSec.Space Logo
Back to CVE Browser

CVE-2018-3985

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1990%
EPSS Percentile30.89th
PublishedMar 21, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.

Affected Platforms (CPE)

📦
Getcujo

Smart Firewall

= 7003

References & Advisories

🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0653
🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0653

Related Vulnerabilities

CVE-2018-403110.0

An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the w...

CVE-2018-40039.8

An exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. The stri...

CVE-2017-122778.8

A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Fire...

CVE-2018-39638.0

An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall. When adding a n...